Behavioral task
behavioral1
Sample
0c7a1fe2d5db55931b602eb52e8af65bbaa72f912b5dc34da6a346b105ad8ce2N.exe
Resource
win7-20240903-en
General
-
Target
0c7a1fe2d5db55931b602eb52e8af65bbaa72f912b5dc34da6a346b105ad8ce2N.exe
-
Size
114KB
-
MD5
aaa3a59353145c4db493fe89d8393180
-
SHA1
64dd51d3073d4295d4bb42469f6eb8cb3c6d106f
-
SHA256
0c7a1fe2d5db55931b602eb52e8af65bbaa72f912b5dc34da6a346b105ad8ce2
-
SHA512
31085f1854b856b00a23952c0b078d472560e1ba3407dd6bc7b98cb51727c58c7e72ae4cbfceb129eaafbc711a2289aa5390897199a736c6fc8a7384e4508c9d
-
SSDEEP
1536:Loaj1hJL1S9t0MIeboal8bCKxo7h0RPLJNz30rtriCr0nJnHPoq1nouy8TRgR:c0hpgz6xGhYJF30Blr0nhoutTRgR
Malware Config
Signatures
-
Sakula family
-
Sakula payload 1 IoCs
resource yara_rule sample family_sakula -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c7a1fe2d5db55931b602eb52e8af65bbaa72f912b5dc34da6a346b105ad8ce2N.exe
Files
-
0c7a1fe2d5db55931b602eb52e8af65bbaa72f912b5dc34da6a346b105ad8ce2N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 66KB - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE